
$ rpki-client -vvf rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa
File: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (raw, json)
Hash identifier: 6T6qe96D7zQgyFzklJ6iaQcLNZnBxADfp/QBK9mZ1I4=
Subject key identifier: 54:D1:F3:52:2B:33:7A:99:FC:7F:17:92:0D:61:65:E1:BA:72:70:93
Certificate issuer: /CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E
Certificate serial: 02C56A369D6BD568E13B4AD154F56D3EF0222FFC
Authority key identifier: 43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa
Signing time: Sun 03 May 2026 02:10:32 +0000
ROA not before: Sun 03 May 2026 02:05:32 +0000
ROA not after: Sun 02 May 2027 02:10:32 +0000
asID: 142327
IP address blocks: 103.168.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl
rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c5:6a:36:9d:6b:d5:68:e1:3b:4a:d1:54:f5:6d:3e:f0:22:2f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E
Validity
Not Before: May 3 02:05:32 2026 GMT
Not After : May 2 02:10:32 2027 GMT
Subject: CN=54D1F3522B337A99FC7F17920D6165E1BA727093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:2a:0c:d0:79:20:0a:d3:cc:bf:25:cf:60:
5a:22:60:6f:3d:92:86:3e:a4:11:42:b9:15:30:94:
63:f7:f4:00:0e:5f:42:66:18:55:af:5d:0c:a6:a6:
a4:46:1b:5c:e3:e9:2b:29:f8:25:4e:3a:fa:65:c0:
e3:14:3e:f1:fc:15:48:6f:bb:cf:1f:b2:ec:11:9b:
37:e6:50:eb:c7:3d:e6:14:ef:a8:a4:ce:fa:11:93:
bd:77:65:1c:41:c5:ad:6a:97:64:08:af:71:9e:5a:
18:9d:6e:b3:3e:65:b9:ac:7c:73:a3:b5:d1:32:7c:
5f:d2:71:b9:00:8e:ef:d1:a7:bd:5c:46:6c:07:c9:
f9:ba:db:b0:4a:96:60:6b:23:aa:de:8a:2a:bf:21:
f6:5a:9c:b5:96:8e:8f:c3:56:87:ca:74:27:08:c0:
b7:cd:42:ab:0b:66:59:2f:02:7c:ae:b0:82:4a:be:
ff:f8:87:49:a5:fe:71:82:a7:3e:ed:84:1b:4b:d9:
20:74:03:b5:b0:7a:16:80:7e:79:fc:a6:e3:9e:e8:
c6:27:fb:ca:1f:1e:af:bd:4c:ef:e8:3b:7b:72:c5:
7b:4c:e5:1b:63:24:76:cd:25:b7:76:31:aa:71:38:
72:ac:ac:63:8c:ed:f0:88:cf:d9:fe:b8:a9:e9:ce:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D1:F3:52:2B:33:7A:99:FC:7F:17:92:0D:61:65:E1:BA:72:70:93
X509v3 Authority Key Identifier:
keyid:43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.251.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e9:00:6e:c9:ff:15:aa:4a:de:21:1f:63:7c:25:54:44:50:
53:04:7e:68:83:6d:9e:69:25:62:c7:6e:9d:a4:af:8f:76:65:
e0:93:0b:7a:f9:43:38:7d:9b:4f:68:3a:25:b3:f4:77:51:37:
81:91:80:20:55:55:a6:45:18:65:00:74:47:fb:92:9e:36:cb:
a7:bd:ac:ea:4f:1f:40:ae:4a:3a:1d:29:a0:04:b0:75:f5:01:
b2:2d:6b:8a:b9:e5:33:f4:29:22:a4:cc:8b:03:93:54:de:73:
77:44:c8:15:40:2f:a8:bd:08:5b:9c:9d:06:b6:c7:91:91:0d:
3d:63:27:67:5c:1c:25:bd:07:45:52:f1:2d:0b:1b:f7:b9:b9:
82:8f:c2:4b:ef:27:a0:20:43:65:27:4d:ea:f6:00:1e:7e:c1:
17:5f:86:87:f5:2c:1d:12:20:34:f2:20:57:b5:69:d5:b3:c4:
34:4c:0d:bc:9b:58:8b:6b:be:57:22:c2:69:f3:f2:22:83:d6:
8f:8c:80:ac:60:dc:1f:da:3c:70:69:a3:ff:2e:e2:40:54:a0:
c7:2f:7b:81:20:d6:69:ad:73:7d:a9:11:3b:eb:7e:83:de:26:
d1:f9:b1:40:8c:ea:18:cf:07:2f:2b:54:65:ea:c1:ef:f4:6a:
0a:cf:bf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:35 2026 by rpki-client